$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa File: da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa (raw, json) Hash identifier: cwKDO3dToT4+gBquxyYQDYrAHbcRo67szo8JOQv1UU8= Subject key identifier: 6D:CF:96:11:19:8D:7A:6E:8A:B2:72:BA:D7:C5:27:DA:2B:BB:C5:4E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461D7D925CFCA77CE08100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:7d:92:5c:fc:a7:7c:e0:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f3b049cb-ca0b-42f7-8af0-3e0ea821c6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:a9:29:2a:93:70:f7:27:29:96:e0:3b:93: 5d:f3:ab:51:53:c9:0b:87:0d:75:bf:ef:05:fa:d6: a2:33:9d:80:38:44:0d:bd:f5:f2:f6:18:44:21:e9: 85:08:e3:85:ee:d9:17:54:2d:9a:a3:1e:30:9f:6c: 9f:8c:22:5f:5d:67:be:aa:6b:a2:a5:57:b9:c1:96: 95:3d:47:54:13:59:a4:31:1f:e0:2b:7d:db:48:a0: 85:e2:d4:7b:52:67:71:6a:f2:74:3c:d1:66:57:51: 4a:2a:00:9b:bd:ce:cd:94:76:17:38:56:9a:ec:03: 11:3a:ce:d2:ef:9e:28:7c:fb:17:8f:f5:60:65:8d: c7:d4:da:ae:a9:40:65:b0:4e:77:ea:3e:3d:8c:8c: 22:c6:d9:6a:63:4e:6d:34:06:62:08:87:c3:58:49: 88:cb:00:43:6c:ea:8b:9b:81:63:21:62:9e:5a:9c: 4a:d3:f9:cb:e5:9e:25:47:3b:65:9b:7e:05:bc:f9: c8:a3:ce:1a:55:ae:23:be:e3:64:11:cd:74:0e:b0: 26:79:c9:ef:79:2d:79:51:e4:38:bd:08:51:8b:d9: 7c:7f:7e:73:31:a4:80:d7:9f:13:92:fb:71:a4:0f: 46:b9:30:96:8c:fb:00:82:39:ad:79:a6:f0:0d:a1: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CF:96:11:19:8D:7A:6E:8A:B2:72:BA:D7:C5:27:DA:2B:BB:C5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fa:61:a2:d5:31:1c:84:23:c2:f4:bd:4a:13:70:8b:fb:17: 1e:8c:86:ec:e6:f3:81:fe:c5:f7:8f:ae:4e:9b:79:76:6e:3e: e1:f6:36:f9:20:bc:58:b9:11:c1:10:69:8a:c9:bd:12:00:87: 29:79:80:37:f3:84:a0:11:78:58:c0:77:1e:c2:ff:3c:4e:b7: e6:af:53:2e:2c:17:08:72:52:b6:61:3e:81:4d:60:87:b3:b7: d5:78:e3:06:1d:ab:24:38:08:2a:17:26:ad:6d:a9:16:77:1d: 3f:ee:83:c1:ce:4d:21:e9:68:e5:5f:e3:00:73:7c:75:63:6d: 3c:d4:47:4d:0d:1a:37:db:0b:07:2b:9b:5b:ad:4b:56:1f:b7: cd:40:7b:9d:4e:90:c3:10:b1:ff:15:d6:77:d2:4d:80:91:77: 96:52:24:14:52:a9:38:7e:d8:6d:d9:86:25:88:45:35:9b:4d: 72:50:44:13:2d:3d:c7:97:16:59:c1:f1:54:7b:d1:4b:5d:9f: fa:1a:73:cb:96:20:df:15:ee:07:c4:36:2e:cd:aa:43:35:ba: 98:12:d9:d9:b2:a1:86:e2:b0:6e:e1:d8:47:7d:3b:e9:02:12: 5f:98:ca:75:bd:d3:b0:e4:a6:f0:2a:3d:f8:4a:1e:fc:62:1c: c4:06:ad:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh19klz8p3zggQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjNiMDQ5Y2ItY2EwYi00MmY3LThhZjAtM2UwZWE4MjFjNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi36pKSqTcPcnKZbgO5Nd86tRU8kLhw11v+8F +taiM52AOEQNvfXy9hhEIemFCOOF7tkXVC2aox4wn2yfjCJfXWe+qmuipVe5wZaV PUdUE1mkMR/gK33bSKCF4tR7UmdxavJ0PNFmV1FKKgCbvc7NlHYXOFaa7AMROs7S 754ofPsXj/VgZY3H1NquqUBlsE536j49jIwixtlqY05tNAZiCIfDWEmIywBDbOqL m4FjIWKeWpxK0/nL5Z4lRztlm34FvPnIo84aVa4jvuNkEc10DrAmecnveS15UeQ4 vQhRi9l8f35zMaSA158TkvtxpA9GuTCWjPsAgjmteabwDaH+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3PlhEZjXpuirJyutfFJ9oru8VOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGE0MDE0YTktOWFiMC0z YWI3LWEyN2QtNDhhM2MzOWY5NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr6YaLVMRyEI8L0vUoTcIv7Fx6Mhuzm84H+xfePrk6beXZuPuH2Nvkg vFi5EcEQaYrJvRIAhyl5gDfzhKAReFjAdx7C/zxOt+avUy4sFwhyUrZhPoFNYIez t9V44wYdqyQ4CCoXJq1tqRZ3HT/ug8HOTSHpaOVf4wBzfHVjbTzUR00NGjfbCwcr m1utS1Yft81Ae51OkMMQsf8V1nfSTYCRd5ZSJBRSqTh+2G3ZhiWIRTWbTXJQRBMt PceXFlnB8VR70Utdn/oac8uWIN8V7gfENi7NqkM1upgS2dmyoYbisG7h2Ed9O+kC El+YynW907DkpvAqPfhKHvxiHMQGrUw= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:59 2025 by rpki-client